❯ PHP’s foundation coordinates critical fixes with one full-time employee

A small foundationAfter two critical PHP flaws triggered urgent patching, executive director Elizabeth Barron told Reuters that the foundation had one full-time employee—herself—and 14 mostly part-time contractors. Its board volunteers are unpaid, and funding comes from donations and grants, according to the Reuters report carried by The Indian Express.

More output to reviewThe foundation worked with OpenAI, Wiz and Calif on investigation and fixes. AI helped find vulnerabilities and improved coding productivity, but proposed code changes nearly doubled year over year without a matching increase in contributors.

Maintenance capacityBarron said there was no evidence of exploitation before disclosure or on patched sites. Faster discovery and code production still require experienced people to review, merge and maintain changes.

▮ SIGNALFaster AI-assisted coding puts more pressure on review and maintenance capacity.